NVD

Id
55125  
Name
CVE-2007-2966  
Description
Buffer overflow in the LHA decompresion component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-31  
Modified Date
2012-10-30  
Seq
2007-2966  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280117 55125 CVE-2007-2966 1018147  View
280118 55125 CVE-2007-2966 http://www.f-secure.com/security/fsc-2007-1.shtml  View
280119 55125 CVE-2007-2966 http://www.nruns.com/security_advisory_fsecure_lzh.php  View
280120 55125 CVE-2007-2966 20070601 n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory  View
280121 55125 CVE-2007-2966 24235  View
280122 55125 CVE-2007-2966 1018146  View
280123 55125 CVE-2007-2966 1018148  View
280124 55125 CVE-2007-2966 ADV-2007-1985  View
280125 55125 CVE-2007-2966 fsecure-lzh-bo(34575)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53420 JVNDB-2007-002112 複数の F-Secure 製品の Real-time Scanning コンポーネントにおけるバッファオーバーフローの脆弱性 F-Secure アンチウイルス製品の LHA 圧縮コンポーネントは、整数ラップに関連する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2007-2966 26321 CVE-2007-2966 55125 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002112.html 2007-05-31 2012-06-26 View